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DETAILED ACTION 

1. Applicant's submission for RCE filed on July 28, 2008 has been entered. Claims 
33-64 are pending. Claims 33, 59 and 64 are amended by the applicant. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

2. Claim 33-48, 51, 52, 59, 63 and 64 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Davies (WO 93/11 51 1 ). 

As per claim 33 , Davis discloses: 

presenting a human ability challenge having a response component, the human ability 
challenge having distorted content that reduces the possibility of automated 
computerized identification of the content performed by an automated computerized 
operation and increase the possibility of a human response [Fig. 2, 3, 5, 7, page 2 lines 
24-28, page 8 lines 1-12]; electronically receiving a human response to the human 
ability challenge [page 4 lines 6-10, Fig. 2, 3, 5, page 8 lines 14-17, 28-36]; and 
comparing the received response to the response component to thereby help determine 
whether the received response was provided by a human [page 5 lines 10-19, page 8 
lines 14-17]. 
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As per claim 34 , the rejection of claim 33 is incorporated and Davis discloses: 

generating the human ability challenge [Fig. 2, 3, 5, 7, page 5 lines 10-19]. 

As per claim 35 , the rejection of claim 34 is incorporated and Davis discloses: 

generating the human ability challenge comprises generating the response component 

and generating the human ability challenge using the response component [Fig. 2, 3, 5, 

7]. 

As per claim 36 , the rejection of claim 35 is incorporated and Davis discloses: 
generating the response component comprises randomly generating the response 
component [page 8 lines 5-7]. 

As per claim 37 , the rejection of claim 35 is incorporated and Davis discloses: 
generating the human ability challenge comprises creating a distorted visual 
representation of the response component [Fig. 2, 3, 5, 7]. 

As per claim 38 , the rejection of claim 35 is incorporated and Davis discloses: 
generating the human ability challenge comprises creating a distorted audio 
representation of the response component [page 3 lines 19-21]. 
As per claim 39 . the rejection of claim 35 is incorporated and Davis discloses: 
selecting a type of human ability challenge from a plurality of human ability challenge 
types [page 3 lines 19-21]. 

As per claim 40 , the rejection of claim 39 is incorporated and Davis discloses: selecting 
the type of human ability challenge comprises randomly selecting the type of human 
ability challenge [page 3 lines 14-21]. 
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As per claim 41 , the rejection of claim 39 is incorporated and Davis discloses: 
determining the respondent's identity, and wherein the step of selecting the type of 
human [page 4 lines 6-12]. 

As per claim 42 , the rejection of claim 39 is incorporated and Davis discloses: 
generating the response component based upon the type of human ability challenge 
selected [page 3 lines 9-11, 26-36, page 4 lines 1-4]. 

As per claim 43 , the rejection of claim 39 is incorporated and Davis discloses: selecting 
the human ability challenge from a plurality of stored human ability challenges [page 9 
lines 1-12]. 

As per claim 44 , the rejection of claim 43 is incorporated and Davis discloses: selecting 
comprises randomly selecting the human ability challenge [page 9 lines 1-12]. 
As per claim 45 . the rejection of claim 33 is incorporated and Davis discloses: providing 
a request for authentication for gaining access to a computerized resource, receiving an 
authentication code, and verifying the code responsive to the request for authentication 
if the received response to the human ability challenge matches the response 
component [page 16 lines 15-18]. 

As per claim 46 , the rejection of claim 33 is incorporated and Davis discloses: receiving 
a request for access to a computerized resource and providing access to the 
resource only if the received response to the human ability challenge matches the 
response component [page 8 lines 1-17]. 



Application/Control Number: 1 0/790,61 1 Page 5 

Art Unit: 2435 

As per claim 47 , the rejection of claim 33 is incorporated and Davis discloses: 
requesting user confirmation of an action and accepting user confirmation only if the 
received response to the human ability challenge matches the response component 
[page 8 lines 1-26]. 

As per claim 48 , the rejection of claim 33 is incorporated and Davis discloses: 
presenting a human ability challenge comprises presenting one or more graphical 
images representing the response component [page 3 lines 14-18]. 

As per claim 51 , the rejection of claim 33 is incorporated and Davis discloses: 
presenting a human ability challenge comprises presenting a noisy textual image 
displaying the response component [page 15 lines 36, Fig. 7]. 

As per claim 52 , the rejection of claim 33 is incorporated and Davis discloses: 
presenting a human ability challenge comprises presenting a natural language question, 
wherein the response component represents an answer to the natural language 
question [page 3 lines 14-24]. 

As per claim 59 , it encompasses limitations that are similar to limitations of claim 1. 

Thus, it is rejected with the same rationale applied against claim 1 above. 

As per claim 63 . the rejection of claim 59 is incorporated and Davis discloses: 

the first, second and third sets of computer program instructions reside on a single 

computer [Fig.1]. 
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As per claim 64 , it encompasses limitations that are similar to limitations of claim 1. 
Thus, it is rejected with the same rationale applied against claim 1 above. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 49, 50 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Davies (WO 93/1 1511) and in view of Yamamoto (US Patent No. 5,928,364). 
As per claim 49 , the rejection of claim 33 is incorporated and Davis discloses 
displaying/presenting the human ability challenge as shown in Figs. 2, 3, 5, 7. Davis 
doesn't expressively mention presenting a cognitive question regarding the plurality of 
graphical images. 
Yamamoto teaches: 

the step of presenting a human ability challenge comprises presenting a plurality of 
graphical images representing identifiable objects and presenting a cognitive question 
regarding the plurality of graphical images, wherein the response component represents 
an answer to the question [Fig. 8A, 8B, col. 5 lines 25-60]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Yamamoto with Davies, since one would have been 
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motivated to prevent others from seeing the secret data easily, password data difficult 
for others to understand [Yamamoto, col. 1 lines 19-20]. 

As per claim 50 , the rejection of claim 33 is incorporated and Davis discloses presenting 
a human ability challenge comprises presenting an audio file (i.e. audio image (voice) 
[page 3 lines 15-24]. 

Yamamoto teaches: the step of presenting a question, wherein the response 
component represents an answer to the question [Fig. 8A, 8B, col. 5 lines 25-60]. 

4. Claims 53-55, 57, 58, 60-62 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Davies (WO 93/11511) and in view of Jalili (US Patent No. 
6,209,104). 

As per claim 53 , the rejection of claim 33 is incorporated and Davis discloses presenting 
a human ability challenge as shown in Fig. 2, 3, 7. 

Jalili teaches the transmitting the human ability challenge from a server to a client [Fig. 
9]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Jalili with Davies, since one would have been 
motivated to provide secure data entry function for authentication system [Jalili, col. 1 
lines 12-13]. 

As per claims 54 and 57 . the rejection of claim 53 is incorporated and Davis discloses 
presenting a human ability challenge as shown in Fig. 2, 3, 7. 
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Jalili teaches the transmitting the human ability challenge with the encrypted/hashed 
response component [Fig. 9, col. 2 lines 7-17]. 

As per claims 55 and 58 , the rejection of claim 54/57 is incorporated and Jalili teaches 
decrypting/hashing the encrypted response component and comparing the 
decrypted/hashed response component to the received response [Fig. 9, col. 2 lines 7- 
17, Fig. 8]. 

As per claim 56 , the rejection of claim 33 is incorporated and Jalili teaches: receiving a 
response to the human ability challenge comprise transmitting the response from the 
client to the server [Fig. 9]. 

As per claim 60 , the rejection of claim 59 is incorporated and it encompasses limitations 
that are similar to limitations of claim 53. Thus, it is rejected with the same rationale 
applied against claim 53 above. 

As per claim 61 , the rejection of claim 60 is incorporated and Jalili teaches: the server 
comprises a proxy server positioned between an application server and the client [Fig. 
9]. 

As per claim 62 . the rejection of claim 60 is incorporated and Jalili teaches: the server 
comprises an application server [Fig. 9]. 

Response to Argument 

5. Applicant's arguments filed July 28, 2008 have been fully considered but they are 
not persuasive. 
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Regarding to applicant argument to claims 33, 59 and 64, Examiner maintains, 
since Davies discloses personal identification devices, which include access control 
system and authentication system. People can recognize very complex images known 
to them but that the basis of that recognition, being mental and conceptual, cannot 
easily be transferred to others. The complex image is considered to be an image that is 
recognizable if already known but no readily capable of unique description to a person 
to whom it is not known. When a complex image is included in a set of similar but not 
identical images, that complex image should be distinguishable from the other images in 
the set, by the human senses of a person familiar with the image, within a certain time 
interval when the whole set is displayed (i.e. human ability challenge). A use can select 
one or more images from a display, the identification of the selected images to the 
system is referred to as an image statement. Knowledge of an identity statement is not 
sufficient to authorize a user, the use must also identify the correct key image linked to 
that identity statement. The personal identification apparatus displays at least one key 
image, which is linked with the received identity statement, along with a plurality of false 
images, receives an image statement and determines whether or not a received image 
statement corresponds to the key image. Thus, only authorized user (human) is able to 
identify the correct key image, which reduces the possibility of automated computerized 
identification of the content (i.e. automated response performed by computer). In this 
case, it meets the claim limitation. 
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Conclusion 

6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to NIRAV PATEL whose telephone number is (571)272- 
5936. The examiner can normally be reached on 8 am - 4:30 pm (M-F). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

NBP 

10/8/08 

/KimYen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



